Privacy Policy

Last Updated: 27th August 2025

1. Introduction and Overview

Welcome to TopSchool.ai, operated by TopSchool.ai Pte. Ltd., headquartered at 65 Devonshire Rd, Singapore 239900.

We provide students, teachers, school administrators, instructors, and parents with access to advanced AI tools and educational technology services through our website, browser extensions, and other services (together, the “Services”).

This Privacy Policy explains:

  • What personal data we collect
  • How we use it
  • When we share it
  • How we protect it
  • Your rights and choices

Our commitment to privacy, especially student data, is paramount. We comply with applicable laws and regulations, including:

  • FERPA (Family Educational Rights and Privacy Act)
  • COPPA (Children’s Online Privacy Protection Act)
  • GDPR (General Data Protection Regulation)

By using our Services, you agree to this Policy and our Terms of Use. Where consent is required (e.g., marketing), we will request it explicitly, and you may withdraw at any time.

2. Data We Collect

a. Personal Information

  • All users: name, email, password, profile details
  • Teachers & administrators: school/organization name, role, phone number
  • Students: age, grade level, educational information provided by the institution

b. Usage Data

  • Features used, content accessed, time spent on platform

c. Device & Technical Data

  • IP address, browser, OS, device identifiers

d. Content Data

  • Student-generated: assignments, projects, communications
  • AI-generated: content created from prompts

e. Cookies & Tracking

  • Used to enhance experience and gather analytics

2A. Legal Basis & User Types

  • Self-registered users (teachers, parents, students signing up directly)
    • Processed under contractual necessity (GDPR Art. 6(1)(b))
    • Optional (e.g., marketing preferences) processed under consent
  • Enterprise users (schools, districts, institutions)
    • Institution is the primary data controller
    • TopSchool acts as data processor under contractual necessity or institution-defined legal basis
    • Institution is responsible for providing notices and obtaining valid consents
  • Child/Student accounts
    • Created by institutions or parents/guardians
    • Must comply with national age of digital consent rules
    • We rely on the institution or guardian to ensure lawful basis

In all cases, GDPR data subject rights apply. You may contact either us or your institution to exercise these rights.

3. How We Use Data

We use collected data to:

  1. Provide and improve Services
  2. Personalize learning experiences
  3. Communicate with users
  4. Analyze usage for platform improvement
  5. Maintain security and integrity
  6. Fulfill legal obligations

We never sell personal data or use it for targeted advertising.

4. Data Sharing & Disclosure

We may share data:

  • With educational institutions (to deliver Services)
  • With subprocessors/service providers (to operate platform)
  • With public authorities (if legally required)
  • During corporate transactions (mergers, acquisitions)
  • With parental consent or where legally mandated

All third parties must comply with privacy and security laws.

5. Data Security & Protection

We use industry-standard safeguards, including:

  • Encryption at rest and in transit
  • Security audits and assessments
  • Access controls & authentication
  • Staff training on privacy

6. User Rights & Choices

Depending on your jurisdiction, you may have rights to:

  • Access and review your data
  • Correct inaccuracies
  • Request deletion (subject to exceptions)
  • Restrict or object to processing
  • Data portability

Contact us at [email protected]. We will respond within the legally required timeframe.

For student data, requests should go via the educational institution.

7. Student Data Provisions

We handle student data with heightened care:

  • Used only for educational purposes
  • No commercial student profiles created
  • FERPA, COPPA, and other student privacy laws fully respected
  • Institutions can review, correct, delete data
  • Retention: normally ≤ 1 year after contract ends (unless anonymised for research/model improvement)
  • EEA: parental consent required where below national digital age of consent (13–16)
  • Additional rules in our Student Data Privacy Addendum

8. International Data Transfers

As a Singapore-based company with global operations:

  • Your data may be processed outside your country
  • Safeguards such as Standard Contractual Clauses (SCCs) are applied

9. Policy Updates

We may update this Policy. Significant changes will be notified on our website, with an updated “Last Updated” date. Please check periodically.

10. Contact Us

For EEA residents, our lead supervisory authority is the Data Protection Commission of Ireland.

Questions or requests? Contact:

TopSchool.ai Pte. Ltd.
65 Devonshire Rd
Singapore 239900
📧 [email protected]

Use AI Platform
Use AI Platform